From owner-freebsd-questions  Tue Oct 20 19:44:07 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id TAA05959
          for freebsd-questions-outgoing; Tue, 20 Oct 1998 19:44:07 -0700 (PDT)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from cyclops.xtra.co.nz (cyclops.xtra.co.nz [202.27.184.96])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id TAA05950
          for <freebsd-questions@FreeBSD.ORG>; Tue, 20 Oct 1998 19:44:04 -0700 (PDT)
          (envelope-from junkmale@pop3.xtra.co.nz)
Received: from wocker (210-55-210-87.ipnets.xtra.co.nz [210.55.210.87])
	by cyclops.xtra.co.nz (8.9.1/8.9.1) with SMTP id PAA01716;
	Wed, 21 Oct 1998 15:41:43 +1300 (NZDT)
Message-Id: <199810210241.PAA01716@cyclops.xtra.co.nz>
From: "Dan Langille" <junkmale@xtra.co.nz>
Organization: DVL Software Limited
To: Dan Busarow <dan@dpcsys.com>, Bryce Newall <data@dreamhaven.net>,
        Matt Prigge <prigge@bucknell.edu>
Date: Wed, 21 Oct 1998 15:41:43 +1300
MIME-Version: 1.0
Content-type: text/plain; charset=US-ASCII
Content-transfer-encoding: 7BIT
Subject: Re: More IPFW/natd trouble, but I'm close!
Reply-to: junkmale@xtra.co.nz
CC: FreeBSD Questions List <freebsd-questions@FreeBSD.ORG>
References: <Pine.BSF.3.96.981020100014.3227H-100000@java.dpcsys.com>
In-reply-to: <Pine.NEB.3.96.981020191543.437E-100000@ds9.dreamhaven.org>
X-mailer: Pegasus Mail for Win32 (v3.01b)
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On 20 Oct 98, at 19:17, Bryce Newall wrote:

> On Tue, 20 Oct 1998, Dan Busarow wrote:
> 
> >   try as above.  If you specify real firewall rules, it's best to
> > 				 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> >   specify line 2 at the start of the script so that natd sees all
> >   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> >   packets before they are dropped by the firewall.  The firewall rules
> >   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> 
> Ahh, I missed that the first time around.  I figured "well, I'm not going
> to have a 'real' firewall", so I ignored everything after.  Oops!  Thanks
> for pointing that out to me, guys. :)
> 

If it's any help to anyone, check out what I did for my firewall.

http://www.freebsddiary.com/freebsd/firewall.htm

cheers.

--
Dan Langille
DVL Software Limited
The FreeBSD Diary - my [mis]adventures
http://www.FreeBSDDiary.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message